$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft File: u99YzWESke9boarLayzE7VCwEVc.mft (raw, json) Hash identifier: LEfx+QaVfbc98Fs2Qa+Wf7DWJ2MWwV4tefpTwQPW3UU= Subject key identifier: 53:FE:D9:CD:7C:CC:D1:B5:DF:B1:23:2E:AE:B7:97:09:8C:B0:12:50 Authority key identifier: BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57 Certificate issuer: /CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157 Certificate serial: 046A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft Manifest number: 0451 Signing time: Fri 19 Sep 2025 00:39:33 +0000 Manifest this update: Fri 19 Sep 2025 00:39:33 +0000 Manifest next update: Fri 26 Sep 2025 00:39:33 +0000 Files and hashes: 1: u99YzWESke9boarLayzE7VCwEVc.crl (hash: Zttjav2gU173lMsO3YQIo6nRKvGRQGsBFiqbb4Cp+aY=) 2: 08241A166B1111EE99759439C4F9AE02.roa (hash: ySASg3k7OY7oJkXL5Ws/83THPGLSCp+zucNat555hyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1130 (0x46a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D46FD, serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157 Validity Not Before: Sep 19 00:39:33 2025 GMT Not After : Sep 26 00:39:33 2025 GMT Subject: CN=68cca645-9228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:94:0a:9a:3a:33:a3:d7:8b:e0:47:df:9f:ef: 54:23:f8:e9:43:99:33:4d:ec:07:30:96:dd:94:66: 44:3f:33:56:55:2e:3e:18:31:44:60:e1:47:64:3f: 0a:77:94:dc:44:ae:16:a9:47:7c:f3:33:35:42:03: 14:fc:d4:f5:cb:c9:1d:bd:70:8a:80:9b:0e:33:3a: a7:96:59:de:e1:35:26:0d:4e:da:91:12:30:4b:5b: b0:db:90:d8:69:c3:50:1b:dc:eb:0f:d9:eb:bb:4b: 01:dd:e3:98:aa:78:9f:64:11:6f:5a:5e:22:9f:75: ad:a5:02:6a:6a:87:76:d4:28:b5:7d:3f:51:14:d6: 35:48:80:9c:b0:33:be:f8:69:77:c0:b9:a2:6e:f1: 5a:d4:96:da:44:ef:b1:77:b4:6e:fc:fc:c4:eb:ce: 6a:df:08:b1:d8:34:85:ee:f4:06:6d:25:c2:70:a9: bd:5c:29:2c:bd:e6:4e:da:1e:67:99:b1:0b:6e:18: bc:2d:1d:97:c2:ad:28:f5:62:28:7e:a6:4f:ca:a6: 91:3c:63:e3:ff:9b:a7:92:b1:ec:c0:7d:96:6a:ed: 1d:29:ff:71:d1:11:87:02:31:dc:ce:06:e1:a5:32: d7:64:ee:38:2a:98:71:f9:46:11:15:98:99:f4:e5: ae:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:FE:D9:CD:7C:CC:D1:B5:DF:B1:23:2E:AE:B7:97:09:8C:B0:12:50 X509v3 Authority Key Identifier: keyid:BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:01:91:07:d5:1b:c2:ed:0a:db:60:41:07:fe:35:b1:b3:eb: ff:47:10:e0:43:21:ee:4a:4b:74:dd:22:23:80:08:be:9d:df: c5:76:be:b7:51:e6:9d:2f:d4:31:2e:12:e8:26:ce:1d:24:6b: f0:3e:91:59:07:ba:ac:35:f3:29:0e:e0:9d:2f:3c:5a:58:0f: 0a:14:c9:a4:0d:4c:0b:d1:29:54:6c:53:3f:ec:5a:9e:f8:e5: 83:ed:dc:7a:c1:87:5b:60:a1:60:3f:59:6f:3b:58:fd:f6:31: 33:65:bf:ac:b9:a0:e8:1a:67:c0:f2:39:4c:52:d9:03:50:1f: 90:42:e0:7d:06:5d:98:69:8f:19:ba:dd:61:32:ef:97:c6:06: f8:db:a7:d5:2c:da:81:02:e7:af:8b:43:cd:bf:21:c6:7d:f9: 30:40:2b:bd:ed:f0:d6:4b:b3:af:0a:15:91:69:09:40:5b:99: 30:d7:e8:cd:2d:8d:63:cf:6b:b9:e1:3e:e9:98:7a:75:bb:64: f9:55:8f:8a:74:ec:a9:1b:5d:76:1a:58:46:dc:aa:de:32:f6: c4:e8:e2:fc:de:33:e8:ea:7a:f1:5c:5a:b4:77:1e:33:96:21: 25:34:f0:f0:03:a4:de:3a:1c:bc:01:1b:5e:69:88:64:fb:50: f3:92:47:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2RkQxMTAvBgNVBAUTKEJCREY1OENENjExMjkxRUY1QkExQUFDQjZCMkNDNEVE NTBCMDExNTcwHhcNMjUwOTE5MDAzOTMzWhcNMjUwOTI2MDAzOTMzWjAYMRYwFAYD VQQDEw02OGNjYTY0NS05MjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5QKmjozo9eL4Effn+9UI/jpQ5kzTewHMJbdlGZEPzNWVS4+GDFEYOFHZD8K d5TcRK4WqUd88zM1QgMU/NT1y8kdvXCKgJsOMzqnllne4TUmDU7akRIwS1uw25DY acNQG9zrD9nru0sB3eOYqnifZBFvWl4in3WtpQJqaod21Ci1fT9RFNY1SICcsDO+ +Gl3wLmibvFa1JbaRO+xd7Ru/PzE685q3wix2DSF7vQGbSXCcKm9XCksveZO2h5n mbELbhi8LR2Xwq0o9WIofqZPyqaRPGPj/5unkrHswH2Wau0dKf9x0RGHAjHczgbh pTLXZO44Kphx+UYRFZiZ9OWu5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFP+2c18 zNG137EjLq63lwmMsBJQMB8GA1UdIwQYMBaAFLvfWM1hEpHvW6Gqy2ssxO1QsBFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDZGRC81OUJGMjE0RTc0 NTExMUVDQTlFOUY4NThDNEY5QUUwMi91OTlZeldFU2tlOWJvYXJMYXl6RTdWQ3dF VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U5OVl6V0VTa2U5Ym9hckxheXpFN1ZDd0VWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDZGRC81OUJGMjE0RTc0NTExMUVDQTlFOUY4NThDNEY5QUUwMi91OTlZeldFU2tl OWJvYXJMYXl6RTdWQ3dFVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6AZEH1RvC7QrbYEEH/jWxs+v/RxDgQyHuSkt03SIjgAi+nd/Fdr63 UeadL9QxLhLoJs4dJGvwPpFZB7qsNfMpDuCdLzxaWA8KFMmkDUwL0SlUbFM/7Fqe +OWD7dx6wYdbYKFgP1lvO1j99jEzZb+suaDoGmfA8jlMUtkDUB+QQuB9Bl2YaY8Z ut1hMu+Xxgb426fVLNqBAuevi0PNvyHGffkwQCu97fDWS7OvChWRaQlAW5kw1+jN LY1jz2u54T7pmHp1u2T5VY+KdOypG112GlhG3KreMvbE6OL83jPo6nrxXFq0dx4z liElNPDwA6TeOhy8ARteaYhk+1DzkkcJ -----END CERTIFICATE-----Generated at Fri Sep 19 02:26:18 2025 by rpki-client